Setting up SSL for mesos

[Douglas Nelson]

I attempted to set up SSL following this guide:
http://mesos.apache.org/documentation/latest/ssl/

I'm able to hit the WebUI with http but using https gives me nothing. I
must be missing something. Here are the steps I'm taking:


   1. I downloaded 0.28.2 from here:
   https://github.com/apache/mesos/releases
   2. I ran ./configure --enable-libevent --enable-ssl
   3. Then I ran make and make install
   4. I set the following environment variables:
  - export SSL_ENABLED=1
  - export SSL_SUPPORT_DOWNGRADE=0
  - export SSL_KEY_FILE=
  - export SSL_CERT_FILE=
   5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
   --work_dir=/var/lib/mesos

I can provide any additional information if needed. Thanks!

Also, I read that SSL would be included in mesosphere's nightly builds:
https://open.mesosphere.com/downloads/mesos-nightly/

How stable are those builds and has SSL already been included?

-Doug Nelson

Re: Setting up SSL for mesos

[Joseph Wu]

If you can see the WebUI via HTTP, without downgrade support, you might be
inadvertently running a different version of Mesos than the one you built.

You can quickly sanity check this by removing either SSL_KEY_FILE or
SSL_CERT_FILE and starting your master.  If your build has SSL support, it
should immediately exit with an error message.

On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson  wrote:
>
> I attempted to set up SSL following this guide:
http://mesos.apache.org/documentation/latest/ssl/
>
> I'm able to hit the WebUI with http but using https gives me nothing. I
must be missing something. Here are the steps I'm taking:
>
> I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
> I ran ./configure --enable-libevent --enable-ssl
> Then I ran make and make install
> I set the following environment variables:
>
> export SSL_ENABLED=1
> export SSL_SUPPORT_DOWNGRADE=0
> export SSL_KEY_FILE=
> export SSL_CERT_FILE=
>
> Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
--work_dir=/var/lib/mesos
>
> I can provide any additional information if needed. Thanks!
>
> Also, I read that SSL would be included in mesosphere's nightly builds:
https://open.mesosphere.com/downloads/mesos-nightly/
>
> How stable are those builds and has SSL already been included?
>
> -Doug Nelson

Re: Setting up SSL for mesos

[Kamil Wokitajtis]

For SSL support on 0.28.2 I am exporting only three variables and it works
like charm:


2016-07-06 21:33 GMT+02:00 Douglas Nelson :

> I attempted to set up SSL following this guide:
> http://mesos.apache.org/documentation/latest/ssl/
>
> I'm able to hit the WebUI with http but using https gives me nothing. I
> must be missing something. Here are the steps I'm taking:
>
>
>1. I downloaded 0.28.2 from here:
>https://github.com/apache/mesos/releases
>2. I ran ./configure --enable-libevent --enable-ssl
>3. Then I ran make and make install
>4. I set the following environment variables:
>   - export SSL_ENABLED=1
>   - export SSL_SUPPORT_DOWNGRADE=0
>   - export SSL_KEY_FILE=
>   - export SSL_CERT_FILE=
>5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>--work_dir=/var/lib/mesos
>
> I can provide any additional information if needed. Thanks!
>
> Also, I read that SSL would be included in mesosphere's nightly builds:
> https://open.mesosphere.com/downloads/mesos-nightly/
>
> How stable are those builds and has SSL already been included?
>
> -Doug Nelson
>

Re: Setting up SSL for mesos

[Kamil Wokitajtis]

export SSL_ENABLED=true
export SSL_KEY_FILE=/etc/mesos/ssl/key.pem
export SSL_CERT_FILE=/etc/mesos/ssl/cert.pem

2016-07-06 23:05 GMT+02:00 Kamil Wokitajtis :

> For SSL support on 0.28.2 I am exporting only three variables and it works
> like charm:
>
>
> 2016-07-06 21:33 GMT+02:00 Douglas Nelson :
>
>> I attempted to set up SSL following this guide:
>> http://mesos.apache.org/documentation/latest/ssl/
>>
>> I'm able to hit the WebUI with http but using https gives me nothing. I
>> must be missing something. Here are the steps I'm taking:
>>
>>
>>1. I downloaded 0.28.2 from here:
>>https://github.com/apache/mesos/releases
>>2. I ran ./configure --enable-libevent --enable-ssl
>>3. Then I ran make and make install
>>4. I set the following environment variables:
>>   - export SSL_ENABLED=1
>>   - export SSL_SUPPORT_DOWNGRADE=0
>>   - export SSL_KEY_FILE=
>>   - export SSL_CERT_FILE=
>>5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>--work_dir=/var/lib/mesos
>>
>> I can provide any additional information if needed. Thanks!
>>
>> Also, I read that SSL would be included in mesosphere's nightly builds:
>> https://open.mesosphere.com/downloads/mesos-nightly/
>>
>> How stable are those builds and has SSL already been included?
>>
>> -Doug Nelson
>>
>
>

Re: Setting up SSL for mesos

[Douglas Nelson]

It must be an issue with my build. I just tried building on a fresh VM and
'make' ended with the following:

cp: cannot stat ‘../../src/python/cli/src/mesos/__init__.py’: No such file
or directory
make[2]: *** [python/cli/src/mesos/__init__.py] Error 1
make[2]: Leaving directory `/mesos/mesos-0.28.2/build/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/mesos/mesos-0.28.2/build/src'
make: *** [all-recursive] Error 1

Any thoughts on what would be throwing the error?

On Wed, Jul 6, 2016 at 3:06 PM, Kamil Wokitajtis 
wrote:

> export SSL_ENABLED=true
> export SSL_KEY_FILE=/etc/mesos/ssl/key.pem
> export SSL_CERT_FILE=/etc/mesos/ssl/cert.pem
>
> 2016-07-06 23:05 GMT+02:00 Kamil Wokitajtis :
>
>> For SSL support on 0.28.2 I am exporting only three variables and it
>> works like charm:
>>
>>
>> 2016-07-06 21:33 GMT+02:00 Douglas Nelson :
>>
>>> I attempted to set up SSL following this guide:
>>> http://mesos.apache.org/documentation/latest/ssl/
>>>
>>> I'm able to hit the WebUI with http but using https gives me nothing. I
>>> must be missing something. Here are the steps I'm taking:
>>>
>>>
>>>1. I downloaded 0.28.2 from here:
>>>https://github.com/apache/mesos/releases
>>>2. I ran ./configure --enable-libevent --enable-ssl
>>>3. Then I ran make and make install
>>>4. I set the following environment variables:
>>>   - export SSL_ENABLED=1
>>>   - export SSL_SUPPORT_DOWNGRADE=0
>>>   - export SSL_KEY_FILE=
>>>   - export SSL_CERT_FILE=
>>>5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>>--work_dir=/var/lib/mesos
>>>
>>> I can provide any additional information if needed. Thanks!
>>>
>>> Also, I read that SSL would be included in mesosphere's nightly builds:
>>> https://open.mesosphere.com/downloads/mesos-nightly/
>>>
>>> How stable are those builds and has SSL already been included?
>>>
>>> -Doug Nelson
>>>
>>
>>
>

[HTTP API] Client Libraries

[Anand Mazumdar]

Hi,

We recently committed documentation around available client libraries for the 
Scheduler 
/Executor
  HTTP 
API’s. 

Link to doc: 
https://github.com/apache/mesos/blob/master/docs/api-client-libraries.md 
 

It would be great if folks can send a PR or review to add more implementations 
that they maintain/use.

-anand